Terms of Service

Privacy Policy

Last updated: September 28, 2026

This Privacy Policy explains how ProgressX ("ProgressX", "we", "us") collects, uses, shares and protects your personal information when you use the ProgressX website and services at progressx.ca (the "Service"). We ask for your express agreement to this policy when you create your account, and again whenever it changes in an important way; we keep a record of each agreement. If you do not agree, please do not use the Service.

01Who can use ProgressX

ProgressX is only for people who are 18 years of age or older. We do not knowingly collect personal information from anyone under 18. If we learn that we have, we will delete the account and its data. If you believe someone under 18 has an account, contact us at [email protected].

ProgressX is not currently offered to residents of Quebec (see our Terms of Service), and we do not knowingly collect personal information from them. If we learn that we have, we will delete the account and its data.

02Information we collect

Account information

  • Email and password. If you sign up with email, we collect your email address and password. Passwords are handled by our authentication provider and stored in hashed form; we never see them in plain text.
  • Google sign-in. If you sign in with Google, we receive your name, email address and profile picture from Google. We do not receive your Google password.

Profile and fitness information you provide

  • Username, display name and bio
  • Age, gender, height, weight and activity level
  • Profile picture and your profile privacy setting
  • Progress photos, videos and the descriptions you add to them

Diet and nutrition information

  • Foods you create or log, serving sizes, calories and macro- and micronutrient values
  • Water you log and your daily water goal
  • Your food log dates, calorie goals and nutrition display preferences

Workout information

  • Your workout splits, the exercises in them, and the sets you log (weight, repetitions and date)
  • Your preferred weight unit

Consent records

When you agree to our Terms of Service and this policy and confirm you are 18 or older, we record which version you agreed to, when, how (sign-up form, Google sign-in or a later update) and your browser type, as proof of consent.

Research searches

When you search the Research section, we process your search terms to return results. Your most recent search may be shown to other users as a "recent search", so please don't include personal information in search terms.

Technical information

  • A login cookie that keeps you signed in (see Cookies below)
  • Information your browser sends automatically, such as IP address, browser type and the pages you request, which may appear in server and network logs

03How we use your information

  • To create and secure your account and sign you in
  • To provide the features you use, such as your profile, progress photos, diet, water and workout tracking, your stats and research search
  • To calculate estimates such as calorie expenditure and targets from the details you give us
  • To show your content to other users according to your privacy settings
  • To keep the Service running, fix problems, and protect against fraud, abuse and security incidents
  • To communicate with you about your account or changes to these policies
  • To comply with legal obligations

We do not sell your personal information, and we do not use it for third-party advertising.

04Health and body information

Details like your weight, height, body photos, diet logs and workout history are sensitive personal information. We collect them only with your express consent and use them only to provide the Service to you and, where you choose, to share content with other users. We do not share them with advertisers, insurers or employers, and we do not use them to make decisions about you. ProgressX is a personal fitness tool: it is not a health care provider and does not give medical advice.

Photos you upload are checked and re-created from their image data before they are stored, which removes hidden content and metadata such as the location where a photo was taken.

05How we share information

We share personal information only in these situations:

  • With other users, as you choose. Your username, profile picture and any content you post may be visible to other users depending on your profile privacy setting.
  • With service providers who help us run the Service and may only use your information to provide their services to us:
    • Supabase: authentication and database hosting
    • Cloudinary: storage and delivery of photos and videos
    • Google: sign-in, if you choose to use it
    • Cloudflare: network delivery and security
  • For legal reasons. If required by law, or to protect the rights, safety and property of our users, the public or ProgressX.
  • In a business transfer. If ProgressX is involved in a merger, acquisition or sale of assets, your information may be transferred as part of that transaction, subject to this policy.

06Cookies and local storage

We use two essential cookies that keep you signed in: token (a short-lived sign-in token) and refresh_token (used to renew it). Both last at most 30 days, are only sent over secure connections in production, and cannot be read by scripts on the page. They are removed when you log out or delete your account. We also store a copy of your profile details in your browser's local storage so pages load quickly; clearing your browser data removes it. We do not use advertising or cross-site tracking cookies.

07Where your information is stored

Our database (Supabase) is hosted in the United States, and our photo storage (Cloudinary) and other service providers may store and process your information in the United States or other countries. Information stored outside Canada is subject to the laws of that country and may be accessible to its courts, law enforcement and national security authorities. We require our service providers to protect it and to use it only to provide their services to us.

08How long we keep it

We keep your information for as long as your account is active. When you delete your account, your profile, logs, consent records and all of your photos are deleted immediately from our systems. Copies in our providers' backups are removed automatically as those backups expire, within 30 days. We may keep information longer only where the law requires it.

09Your rights and choices

  • Access and portability: download a copy of all the personal information we hold about you at any time from Settings > Your data > Download my data.
  • Correction: you can view and edit most of your information in the app, or ask us to correct it.
  • Deletion: delete individual photos in the app, or permanently delete your whole account and all of its data from Settings > Your data > Delete account.
  • Privacy settings: you can change who can see your profile and blur your progress photos at any time.
  • Withdrawing consent: you can withdraw your consent at any time by deleting your account. You can also contact us to withdraw consent to a particular use.

For any other request, email our Privacy Officer at [email protected]. We may need to verify your identity first, and we respond within 30 days. If you are not satisfied with our response, you can complain to the Office of the Privacy Commissioner of Canada.

10Security

We protect your information with safeguards suited to its sensitivity, including encrypted connections, hashed passwords, database access rules that keep each user's data separate, rate limits on sign-in and uploads, and checks on every uploaded file. No system is perfectly secure, so we cannot guarantee absolute security. If a breach of security safeguards creates a real risk of significant harm to you, we will notify you and report it to the Office of the Privacy Commissioner of Canada as soon as feasible, and we keep a record of every breach.

11Changes to this policy

We may update this policy from time to time. If we make significant changes, we will update the date above and ask you to review and agree to the new version the next time you use ProgressX.

12Contact us

Cole Branston, Privacy Officer, is accountable for how ProgressX handles personal information. Questions, requests or complaints about your privacy: [email protected]. For general support, email [email protected].